Skip to content

JBoss Enterprise Application Platform 6.3 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • File permissions must be configured to protect log information from unauthorized modification.

    <VulnDiscussion>If log data were to become compromised, then competent forensic analysis and discovery of the true source of potentially mali...
    Rule Medium Severity
  • SRG-APP-000120-AS-000080

    <GroupDescription></GroupDescription>
    Group
  • File permissions must be configured to protect log information from unauthorized deletion.

    &lt;VulnDiscussion&gt;If log data were to become compromised, then competent forensic analysis and discovery of the true source of potentially mali...
    Rule Medium Severity
  • SRG-APP-000125-AS-000084

    <GroupDescription></GroupDescription>
    Group
  • The JBoss Password Vault must be used for storing passwords or other sensitive configuration information.

    &lt;VulnDiscussion&gt;JBoss EAP 6 has a Password Vault to encrypt sensitive strings, store them in an encrypted keystore, and decrypt them for appl...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules